There’s not enough qualified people to take computer security seriously. The vast majority of “cybersecurity” professionals are capable only of insuring that bo

There’s not enough qualified people to take computer security seriously. The vast majority of “cybersecurity” professionals are capable only of insuring that boxes are checked. Of the small number of truly qualified people, many work as independent researchers or in small specialized consultancies because they are dispositionally incompatible with a giant enterprise. The remainder work in places like Google or Microsoft. If UnitedHealth Group by some miracle broke through its cultural barriers to hiring a bunch of poorly dressed 28 year olds with bad attitudes, paying each more than a group vice president makes, plus empowering the head bad attitude former hacker CISO to block corporate initiatives in the name of security, it still would be a zero sum game. We’d end up with a less secure android or windows.